Solved

Server 2000 EVENT VIEWER FILLING ON EACH BOOT + 3 or 4 ERRORS in EVENT LOG!!! POSTING WHAT I SEE!!!

Posted on 2006-10-20
7
292 Views
Last Modified: 2008-01-09
OK so I am running windows server 2000 and have 3 client computers at my house running XP... I am just trying to learn server technology, so i may have not installed server 2000 correctly, it was awhile since i installed server 2000, i'm not sure if i set everything up correctly... every day after a few hours the event log on the server 2000 the event log fills up and warns me that it is full... I noticed the one major error message is the one filling it up, i will post that one first, but ALSO, i use a logon script, so when the user in active directory logs in i have their logon script run, for some reason the network shares disconnect after a few minutes or sometimes a few hours.... Once i open up explore, and just click once on the disconnevted network drive it then says connected, i'm not double clicking or anything like that, just one click and it connects.... Anyways, i guess thats not my main problem.... I think i may have a DNS problem as well.... take a look at these error messages i am seeing in event logs on server 2000.

THESE FIRST TWO EVENTS ARE THE ONES I SEE THE MOST, and have the RED NEXT TO THEM, WHICH IS NOT GOOD...

Event Type:      Warning
Event Source:      MSFTPSVC
Event Category:      None
Event ID:      100
Date:            10/19/2006
Time:            1:44:18 PM
User:            N/A
Computer:      SERVER2000
Description:
The server was unable to logon the Windows NT account 'Administrator' due to the following error: Logon failure: unknown user name or bad password.  The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 2e 05 00 00               ....    



Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5774
Date:            10/20/2006
Time:            3:52:59 AM
User:            N/A
Computer:      SERVER2000
Description:
Registration of the DNS record '_ldap._tcp.pdc._msdcs.theshacknj.com. 600 IN SRV 0 100 389 server2000.theshacknj.com.' failed with the following error:
DNS server unable to interpret format.  
Data:
0000: 29 23 00 00               )#..    


THESHACKNJ  is the NAME OF MY DOMAIN, THING IS I HOST MY FRIENDS WEBSITE TOO, CALLED THESHACKNJ.COM  not sure if thats bad or not....  ANYWAYS, BELOW ARE THE OTHER ERROR MESSGES IN EVBENT LOG, BUT THE TWO ABOVE ARE MOST IMPORTNT TO FIX....

Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5774
Date:            10/19/2006
Time:            1:25:27 PM
User:            N/A
Computer:      SERVER2000
Description:
Registration of the DNS record '_kpasswd._tcp.theshacknj.com. 600 IN SRV 0 100 464 server2000.theshacknj.com.' failed with the following error:
DNS server unable to interpret format.  
Data:
0000: 29 23 00 00               )#..  


------------------------------------------------------------------------------------------------------


Event Type:      Warning
Event Source:      NETLOGON
Event Category:      None
Event ID:      5781
Date:            10/19/2006
Time:            1:24:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available.
Data:
0000: 2a 23 00 00               *#..    


----------------------------------------------------------------------------------------------------------------- THIS IS A TIME ERROR????

Event Type:      Error
Event Source:      w32time
Event Category:      None
Event ID:      62
Date:            10/19/2006
Time:            5:19:23 PM
User:            N/A
Computer:      SERVER2000
Description:
This Machine is a PDC of the domain at the root of the forest. Configure to sync from External time source using the net command,  'net time /setsntp:<server name>'.
Data:
0000: e5 03 00 00               å...    


------------------------------------------------------------------------------------------------------------------------NEXT ONE IS JUST EVENT LOG IS FULL

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6000
Date:            10/19/2006
Time:            1:58:14 PM
User:            N/A
Computer:      SERVER2000
Description:
The System log file is full.




THANKS A LOT, I HOPE THOSE EVENT LOGS HELP SOMEBODY UNDERSTAND WHATS GOING ON WITH MY COMPUTER, PLEASE LET ME KNOW WHAT I CAN DO ASAP!!!! THANKS AGAIN!!!!! And if you know how to keep my network MAPPED drives connected that will be cool too, but maybe the first problem will help my other ones, possibly a dominoe effect going on???  THANKS IN ADVANCE!!!!!


0
Comment
Question by:PaigePeople
  • 4
  • 3
7 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
Comment Utility
reinstall DNS. Make sure there are no services running under the admin account as it sounds like a PW may have been changed and a service could still be starting it.

make sure on client and server tcpip config that you are only looking internall at DNS, no ISP entries except as forwarders
0
 

Author Comment

by:PaigePeople
Comment Utility
OK I will reinstall DNS, not sure how to really set that up.... I know my router may be acting as the dhcp server assigning IP's.....
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 500 total points
Comment Utility
should have your server doing DHCP...thats probably where half your issues are coming from!
0
New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

 

Author Comment

by:PaigePeople
Comment Utility
OK, so i set up DNS on the server, not getting the error message in the event log, however, my network shares are still be lost after a few hours and i'm gonna assume its becasue i should have my server acting as the dhcp server as well?? Now, i never set dhcp up before, is it pretty easy, says i have to set up a scope first, which i assume is the ip numbers to be assigned.... so the router is 192.168.1.1   so i would want the scope to be 192.168.1.2 - 192.168.1.254  or like .100 i only have 5 computers in the house between my roomates and I so no need to have so many ip addys reserved.... What other info should i know before setting up that....

Ok and these are the TWO new ERROR messages in the EVENT LOG on the server.... Keep in mind i still have the router acting as DHCP server... not sure about the second error.... but still not sure how tio set up the dhcp, with scope and all that....


OK THIS IS THE DHCP ERROR   THIS ERROR APPEARED EVERY HOUR AT THE SAME MINUTE after i cleared the log... so say 12:08am 1:08am 2:08am etc etc
 
Event Type:      Error
Event Source:      DhcpServer
Event Category:      None
Event ID:      1051
Date:            10/27/2006
Time:            2:08:51 PM
User:            N/A
Computer:      SERVER2000
Description:
The DHCP/BINL service has determined that it is not authorized to service clients on this network for the Windows domain: theshacknj.com.
Data:
0000: 00 00 00 00               ....    


SOMETHING TO DO WITH THE TIME NOT UPDATING OR BEING CORRECT????  I even tried this net time /setsntp:<server name>'. putting in my server name... said command completed succesfully  but then over the next 6 hours it gave the erro a couple times...

Event Type:      Error
Event Source:      w32time
Event Category:      None
Event ID:      62
Date:            10/27/2006
Time:            12:53:00 PM
User:            N/A
Computer:      SERVER2000
Description:
This Machine is a PDC of the domain at the root of the forest. Configure to sync from External time source using the net command,  'net time /setsntp:<server name>'.
Data:
0000: e5 03 00 00               å...    








NOW THESE NEXT TWO WERE FINE, But curious to know what they actually mean???  received 0 Articles????


Event Type:      Information
Event Source:      NNTPSVC
Event Category:      None
Event ID:      420
Date:            10/27/2006
Time:            2:08:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Pickup Directory Status Report.  In the last 60 minutes, the pickup directory for  virtual server 1 has successfully received 0 articles.    



Event Type:      Information
Event Source:      NNTPSVC
Event Category:      None
Event ID:      421
Date:            10/27/2006
Time:            2:08:02 PM
User:            N/A
Computer:      SERVER2000
Description:
Post Status Report.  In the last 60 minutes, the virtual server 1  has successfully received 0 posts.  



THANKS AGAIN FOR ALL THE HELP!!!! Sorry i am slow to respond but i have been away, my brother got married recently in arizona....
0
 

Author Comment

by:PaigePeople
Comment Utility
so this is now filling up my event log, the dhcp is set up and dns is setup... This is really the only ERROR message in the event log now, but its their a thousand times, well a lot...



Event Type:      Warning
Event Source:      MSFTPSVC
Event Category:      None
Event ID:      100
Date:            10/28/2006
Time:            2:38:54 PM
User:            N/A
Computer:      SERVER2000
Description:
The server was unable to logon the Windows NT account 'Administrator' due to the following error: Logon failure: unknown user name or bad password.  The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 2e 05 00 00               ....    
0
 
LVL 48

Expert Comment

by:Jay_Jay70
Comment Utility
you have to disable the router from doing DHCP or things will go haywire

good guide for DHCP

http://computerperformance.co.uk/w2k3/services/DHCP_Configure.htm
0
 

Author Comment

by:PaigePeople
Comment Utility
yeah i disabled the router from doing DHCP the same time i authorized the DHCP server on the windows 2000 box... So that shouldnt be the problem... Any other ideas????
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now